set confroot in env, not cartulary.conf